Joysafeter v2 - #141

Open

yuzzjj wants to merge 958 commits into

mainfrom

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 17, 2026

fix(auth): keep an api-key valid only while its creator retains project access

yuzzjj
and
claude
committed
238bfb4
fix(tasks): enforce project access on the task-stream websocket

yuzzjj
and
claude
committed
f1ace33
fix(auth): make organization membership unique per (org, user)

yuzzjj
and
claude
committed
734742c
fix(projects): make grant_project_membership idempotent under a concurrent insert

yuzzjj
and
claude
committed
b319a3c
refactor(auth): unify role/permission vocabulary across org, project, api-key, and skill

yuzzjj
and
claude
committed
a1a0788
refactor(db): normalize role columns to the unified vocabulary

yuzzjj
and
claude
committed
9ff304b
test: update fixtures and assertions for the unified role vocabulary

yuzzjj
and
claude
committed
df16c2e
refactor(frontend): collapse org role vocab and fix project-capability gating

yuzzjj
and
claude
committed
16e2be6
docs: correct skill collaborator role tiers to viewer < editor < admin

yuzzjj
and
claude
committed
7d537c7
fix(joysafeter_api): close CSRF, cancel, idempotency and credential-masking gaps

yuzzjj
and
claude
committed
725e682
feat(skills): add SkillCollaboratorService for per-skill collaborator ACL

yuzzjj
and
claude
committed
5609ec2
feat(skills): add collaborator management API and caller-capability field

yuzzjj
and
claude
committed
b8e68a3
feat(frontend): add skill collaborators management panel

yuzzjj
and
claude
committed
da6aa73
fix(orchestrator): reclaim error-state sandboxes and keep reused ones alive

yuzzjj
and
claude
committed
63e7b4c

Commits on Jul 18, 2026

fix(joysafeter_api): stop health topology/error leak and bound manual schedule triggers

yuzzjj
and
claude
committed
a6b8ac0
refactor(skills): remove dead service code and orphaned root_path plumbing

yuzzjj
and
claude
committed
90d0f03
feat(skills): add version-restore UI and tidy frontend skill surface

yuzzjj
and
claude
committed
5bac722
test(skills): cover the version-restore confirm flow

yuzzjj
and
claude
committed
3e28cf3
fix(joysafeter_api): cap task prompt/system_prompt length at the schema layer

yuzzjj
and
claude
committed
1c70c06
fix(joysafeter_api): fail-closed OAuth state validation + request body-size cap

yuzzjj
and
claude
committed
f8323ce
fix(joysafeter_api): cap session user.message content length

yuzzjj
and
claude
committed
18ca58b
refactor(skills): reuse resolve_skill_org_id for skill org resolution

yuzzjj
and
claude
committed
458c994
refactor(skills): dedup role Select and tighten capability type

yuzzjj
and
claude
committed
f672078
fix(joysafeter_api): drain all SSE event pages instead of truncating at one

yuzzjj
and
claude
committed
6cd2714
fix(joysafeter_api): add security response headers; pin docs gating

yuzzjj
and
claude
committed
f0da279
fix(joysafeter_api): build file Content-Disposition safely (RFC 5987)

yuzzjj
and
claude
committed
c5a872b
fix(session-broadcaster): share one Redis subscription per session

yuzzjj
and
claude
committed
cc1164a
fix(auth): gate project-member mutations with a declarative project-admin dep

yuzzjj
and
claude
committed
d812564
fix(tasks): make task enqueue resilient; stop conflating session-busy with enqueue failure

yuzzjj
and
claude
committed
6a06526

Commits on Jul 20, 2026

feat(skills): P1 additive schema for single-axis redesign

yuzzjj
and
claude
committed
de83d1c
fix(skills): disambiguate JoySafeterSkillVersion.skill foreign key

yuzzjj
and
claude
committed
4e2a645
feat(skills): P2 single-axis project-capability permission gate

yuzzjj
and
claude
committed
cc1a8a9
feat(skills): P3 version-level tiered promotion approval + correctness fixes

yuzzjj
and
claude
committed
7000d9c
feat(skills)!: P4 remove collaborator axis + is_public/private; project_id NOT NULL

yuzzjj
and
claude
committed
edb2bbb
fix(skills): P4 /simplify — cascade project FK, typed promotion tiers, drop dead service

yuzzjj
and
claude
committed
6398e09
feat(skills): P5 frontend single-axis — remove collaborator UI, add promotion UI

yuzzjj
and
claude
committed
faf4a5b
refactor(skills): P5 /simplify — PromotableTier type, narrow promotion invalidation, drop dead i18n

yuzzjj
and
claude
committed
33fa54a
chore(skills): P6 cleanup — drop dead error codes + stale collaborator comments

yuzzjj
and
claude
committed
f7542e0
fix(skills): P7a — break four-eyes deadlock + recompute visibility on version delete

yuzzjj
and
claude
committed
4d41d2b
test(skills): adversarial tests proving P7a fixes are real

yuzzjj
and
claude
committed
89e3880
fix(skills): enforce org isolation on promotion approve/reject/takedown

yuzzjj
and
claude
committed
a59fcda
fix(skills): bind promotion scan gate to the promoted version's content

yuzzjj
and
claude
committed
9dec8d0
fix(skills): list org super-user's skills to match check_skill_access

yuzzjj
and
claude
committed
3e7fa90
chore(backend): make CI gates green — ruff format/lint + mypy repo-wide

yuzzjj
and
claude
committed
b44780f
style(frontend): prettier --write to satisfy frontend CI format check

yuzzjj
and
claude
committed
3d9a9ec
refactor(tests): improve assertion formatting for clarity
yuzzjj
committed
da5ef5a
refactor(tests): streamline assertion formatting for task count checks
yuzzjj
committed
d7285b7
fix(skills): remove unused has_planning_files var (F841) in session-catchup

yuzzjj
and
claude
committed
a7ba807
Remove pentest skills related to secrets exposure, supply chain, vulnerability verification, and whitebox code review, including associated tools and workflows. This cleanup streamlines the skill s…
yuzzjj
committed
327881f
Remove outdated planning files and scripts; streamline documentation and templates for task management
yuzzjj
committed
180c526
fix(tests): mark error-code catalog guard no_db so CI skips Postgres/alembic

yuzzjj
and
claude
committed
e0cef61
refactor(tests): streamline assertion formatting and update import order for consistency
yuzzjj
committed
4a4f00a
feat: JDOS production Dockerfiles for backend and frontend

GLei16
and
claude
committed
099661b
feat: add Node.js base image Dockerfile for JDOS

GLei16
and
claude
committed
23fe7c5
refactor: storage abstraction + cleanup obsolete config

GLei16
and
claude
committed
166a01a
feat: add project_id to storage key for file isolation

GLei16
and
claude
committed
9136b9e
refactor: storage trait abstraction for extensibility

GLei16
and
claude
committed
2276b95
UPDATE frontend-build.yam

ext.zhangmingkai6
authored and
GLei16
committed
925ea1a
fix: cleanup JDOS frontend Dockerfile — remove autosec residuals

GLei16
and
claude
committed
45b1cae
fix: JDOS frontend Dockerfile COPY paths for root build_context

GLei16
and
claude
committed
c4b53dc
fix: set frontend build_context to ./frontend (matching backend pattern)

GLei16
and
claude
committed
ca6d1c8
fix: install unzip before bun in JDOS frontend Dockerfile

GLei16
and
claude
committed
1fe63fe
fix: auto-select app module by JOYSAFETER_SERVICE_ROLE in JDOS backend

GLei16
and
claude
committed
6ada9ee
fix: escape env vars in JDOS backend ENTRYPOINT for runtime resolution

GLei16
and
claude
committed
2cb9019
refactor: move JDOS backend startup logic into entrypoint.sh

GLei16
and
claude
committed
83ca58c
feat: add UTF-8 locale and migration mode to backend entrypoint

GLei16
and
claude
committed
67e3a44
fix: explicitly export env vars to admin subshell in JDOS backend

GLei16
and
claude
committed
747b6d4
fix: default empty int env vars + use C.UTF-8 locale in JDOS backend

GLei16
and
claude
committed
941033e
refactor: adopt Dify entrypoint pattern for JDOS backend

GLei16
and
claude
committed
0f88f1e
refactor: drop MODE alias, use JOYSAFETER_SERVICE_ROLE only

GLei16
and
claude
committed
25eb830
chore: remove MIGRATION_ONLY and DEBUG from JDOS backend entrypoint

GLei16
and
claude
committed
eb1ffc3
fix: explicit asyncpg SSL control to avoid /root cert permission error

GLei16
and
claude
committed
cca42a0
chore: surface S3 file read failures as warn (not debug)

GLei16
and
claude
committed
cc0782a
fix: extract archives into parent dir to avoid double nesting

GLei16
and
claude
committed
fe4bf46
feat: make DB pool size configurable via DATABASE_POOL_SIZE env var

GLei16
and
claude
committed
31b58e3
docs: add DATABASE_MIN_CONNECTIONS to env examples

GLei16
and
claude
committed
45d60e0
feat: make gRPC/scheduler capacity limits configurable via env vars

GLei16
and
claude
committed
6ad74d3
docs: add gRPC/scheduler capacity vars to env examples

GLei16
and
claude
committed
24a31b6
refactor(phase1): extend SandboxProvider trait to full execution-plane abstraction

GLei16
and
claude
committed
c053c61
refactor(phase2): DockerProvider absorbs Envoy/xDS/ImageBuilder

GLei16
and
claude
committed
831b8a1
refactor(phase3): remove all Docker/Envoy references from framework layer

GLei16
and
claude
committed
9b8cd0e
refactor(phase4): implement new trait methods for Daytona/E2B providers

GLei16
and
claude
committed
e8e9f1f
refactor: extract ImageBuilderBackend trait for pluggable image builds

GLei16
and
claude
committed
bcc726a
security: fix 3 high-severity bugs in orchestrator

GLei16
and
claude
committed
06a6db6
fix: resolve 9 medium-severity bugs (M1-M8, M10) in orchestrator

GLei16
and
claude
committed
47392b1
chore: export gunicorn settings in JDOS backend image
GLei16
committed
cfe1b84
chore: update joysafeter-ctl dependencies

GLei16
and
claude
committed
886788e
feat: analytics dashboard + joysafeterctl improvements + UI updates

GLei16
and
claude
committed
2dffcea
chore(frontend): update bun.lock for recharts dependency

GLei16
and
claude
committed
3547b26
feat(analytics): redesign monitoring dashboard with actionable insights

GLei16
and
claude
committed
19ebb95
Merge branch 'joysafeter-v2' of coding.jd.com:llm-app-dev-sys/Joysafeter into joysafeter-v2
GLei16
committed
5b5ca0b
fix(orchestrator-rs): resolve 30 compilation errors from incomplete refactoring

GLei16
and
claude
committed
f17776c
fix(frontend): auto-refresh data after project switch

GLei16
and
claude
committed
8557cec
fix(deploy): surface missing-dependency errors with platform-specific install guides

yuzzjj
and
claude
committed
1ba8f4b
fix(deploy): validate SkillSpector source content, not just directory existence

yuzzjj
and
claude
committed
975c669
fix(deploy): rename db service to postgres to match POSTGRES_HOST convention

yuzzjj
and
claude
committed
ead3309
refactor(deploy): unify image sources — 6 vars down to 2

yuzzjj
and
claude
committed
c12d1ed

Commits on Jul 21, 2026

fix(test): align testcontainers postgres image to 15-alpine

yuzzjj
and
claude
committed
30bd700
refactor(deploy): 环境变量统一化——唯一真相源 + 消除重复声明

yuzzjj
and
claude
committed
402447c
feat(skill): runtime usage audit, agent ref validation, delete protection, and runtime-eligibility gates

yuzzjj
and
claude
committed
245c54b
test(skill): align usage api response assertions
yuzzjj
committed
c89cd68
fix(skill): security scan 状态流转 4 处 bug 修复

yuzzjj
and
claude
committed
7719c17
feat(egress): third-party service credential injection with path allowlist

GLei16
and
claude
committed
511f5e6
Merge remote-tracking branch 'origin/joysafeter-v2' into joysafeter-v2
GLei16
committed
9639f1c

Commits on Jul 22, 2026

feat(ui): egress service card UX overhaul + secret list distinction + i18n fixes

GLei16
and
claude
committed
9265036
fix(egress): add non-standard port to vhost domains for transparent route matching

GLei16
and
claude
committed
6c4fc57
fix(skill): move _bg_select import before try block to prevent NameError

yuzzjj
and
claude
committed
e764eb6
fix(orchestrator): stabilize event state authority
yuzzjj
committed
6306fce
fix(skill): skip security scan gate on approve when scanning is disabled

GLei16
and
claude
committed
df1f5d2
Merge remote-tracking branch 'origin/joysafeter-v2' into joysafeter-v2
GLei16
committed
18ca128
fix(skill): unblock approve button when skill is pending_review

GLei16
and
claude
committed
489a3e3
fix(skill): skip all security scan gates when scanning is disabled

GLei16
and
claude
committed
33a44b5
fix(agent): skip security scan gate on skill ref validation when scanning disabled

GLei16
and
claude
committed
cbb1ab5
perf(runner): skip redundant skill unpack on multi-turn tasks

GLei16
and
claude
committed
36fa93a
fix(agent): return 409 Conflict on duplicate agent name instead of 500

GLei16
and
claude
committed
4126be1
fix(orchestrator): respect SKILL_SECURITY_SCAN_ENABLED in Rust harness builder

GLei16
and
claude
committed
c050875

Commits on Jul 23, 2026

fix(envoy): escape % in credential header values to prevent StreamInfo parse error

GLei16
and
claude
committed
4a30f0b
feat(orchestrator): restore external-service egress credential injection

GLei16
and
claude
committed
6f39c76
fix(egress): remove external service hosts from allowlist to prevent duplicate domain

GLei16
and
claude
committed
9db3930
refactor(egress): remove placeholder route, keep transparent-only

GLei16
and
claude
committed
2c3cebc
refactor(egress): unify credential injection into flat EgressCredentialRoute list

GLei16
and
claude
committed
e68ec0d
refactor(sandbox): unify destroy protocol + memoize VaultCipher key

GLei16
and
claude
committed
fbfcf51
refactor(db): split queries.rs into domain submodules

GLei16
and
claude
committed
099e098
refactor(events): introduce EventSink trait for pluggable event persistence

GLei16
and
claude
committed
f8e3f39
refactor(engine): LLM credential registry + EngineAdapter for extensibility

GLei16
and
claude
committed
a5ecc05
fix(auth): refresh access token before treating session check as logged-out

GLei16
and
claude
committed
89301c8
refactor(frontend): shared CopyButton + useCopyToClipboard hook

GLei16
and
claude
committed
d0dcdff
refactor(frontend): unify status colors into a semantic tone scale

GLei16
and
claude
committed
8160a1b
feat(frontend): add useScopedActions hook for scope-guard orchestration

GLei16
and
claude
committed
3f55c89

Commits on Jul 24, 2026

refactor(frontend): migrate agents/page.tsx to useScopedActions

GLei16
and
claude
committed
fbf1c05
refactor(frontend): migrate environments/page.tsx to useScopedActions

GLei16
and
claude
committed
c776ebc
feat(schedules): add session mode (fresh/reuse/pinned) to scheduled tasks

GLei16
and
claude
committed
114da93
ux(schedules): show engine/model tags in agent picker, network type in env picker

GLei16
and
claude
committed
cba2e81
fix(schedules): reduce agent/environment query limit to 100 (API max)

GLei16
and
claude
committed
720743e
ux(schedules): add search filter to agent and environment selectors

GLei16
and
claude
committed
f5a06d6
ux(schedules): polish agent/environment searchable selectors

GLei16
and
claude
committed
5c5ce98
ux(schedules): constrain agent selector dropdown width to trigger width

GLei16
and
claude
committed
f9a7f22
fix(db): correct tasks.schedule_id FK to reference joysafeter_schedules

GLei16
and
claude
committed
84a431d
fix(db): add missing trigger migrations + fix revision chain

GLei16
and
claude
committed
34cea5e
feat: add trigger scheduling and sandbox file APIs
GLei16
committed
587c6e5
revert: restore frontend bun installer
GLei16
committed
72b81d0
feat(agent): system_prompt_mode option (append vs replace)

GLei16
and
claude
committed
da72c88
ux(agent): system prompt mode toggle (append/replace) on edit page

GLei16
and
claude
committed
9ba2053
ux(agent): add system_prompt_mode toggle to create dialog

GLei16
and
claude
committed
eafd9ab
ux(agent): add tooltip hints on system prompt mode radio buttons

GLei16
and
claude
committed
ac70263

Commits on Jul 27, 2026

feat(skill): enhance runtime eligibility handling with localized messages and actions
yuzzjj
committed
c95109e
feat(skill): implement admin capability checks for skill lifecycle transitions
yuzzjj
committed
34f382f
fix(skill): gate publish/delete on admin and split permission from run-staleness

yuzzjj
and
claude
committed
a4cff68
refactor(skill): unify isProjectSkillAdmin onto the shared admin hook

yuzzjj
and
claude
committed
06b43d0
refactor(skill): drop unused eligibility action "kind"

yuzzjj
and
claude
committed
61856b2
fix(managed): localize leaked machine codes and gate the triggers page

yuzzjj
and
claude
committed
269b5bd
ux(skills): tighten lifecycle action buttons into single row

GLei16
and
claude
committed
9dd05d9
ux(storage): put action buttons in single row

GLei16
and
claude
committed
7286f4f
ux(storage): set 320px width on actions column to prevent truncation

GLei16
and
claude
committed
d105723
sec(storage): raise audit log API to require_joysafeter_user_admin

GLei16
and
claude
committed
86abd16
fix(skill): allow project admins to delete skills regardless of ownership
yuzzjj
committed
288bed6
sec(storage): scope audit logs to organization for org admins

GLei16
and
claude
committed
d5a6179
refactor(skill): scope skill-name uniqueness by project, not owner

yuzzjj
and
claude
committed
dab4b54
refactor(org-member): unify role-hierarchy checks onto JoySafeterRole.can_grant

yuzzjj
and
claude
committed
676a21c
chore(model): replace legacy claude-opus-4-20250514 default with Claude-Opus-4.6

yuzzjj
and
claude
committed
0ad6b34
feat(deploy): ensure a single valid vault encryption key across deploy/.env and backend/.env

yuzzjj
and
claude
committed
ba0be7f
ux(environments): rename 'Storage 挂载' to '数据卷挂载' with better description

GLei16
and
claude
committed
74cebd4
ux(environments): trim redundant storage mount description

GLei16
and
claude
committed
233e0b4
refactor(org-member): drop redundant un-audited member write routes

yuzzjj
and
claude
committed
d254acb
fix(validation): enforce required fields on Agent edit + Environment edit

GLei16
and
claude
committed
e3d292f
ux(tooltips): add FieldHelp to permission mode, network type, allowed hosts

GLei16
and
claude
committed
f4d2a8a
ux(tooltips): add FieldHelp to env vars, secret refs, storage mount sub-fields

GLei16
and
claude
committed
69b9ed9
fix(skill): refresh list after skill delete and allow deleting archived skills

yuzzjj
and
claude
committed
d20dbd9
refactor(skill): single-source security_status via enum + state-vocab guardrails

yuzzjj
and
claude
committed
30c4346
ux: rename '存储授权' to '数据卷' in sidebar and page title

GLei16
and
claude
committed
cefbb22
feat: refine managed runtime configuration
GLei16
committed
462300c
Merge remote-tracking branch 'origin/joysafeter-v2' into joysafeter-v2
GLei16
committed
32182b8
fix alembic migration head
GLei16
committed
07973cc
fix managed scheduling and platform pagination
GLei16
committed
cb69bea

Commits on Jul 28, 2026

Commits on Jul 29, 2026

fix sandbox networking startup and session policy path
GLei16
committed
fbebab8
fix orchestrator socket packaging and project limits
GLei16
committed
c62c7f8
fix(db): add forward-only repair migration for storage mount tables

yuzzjj
and
claude
committed
0e82f24
test(orchestrator): prefer JOYSAFETER_TEST_DATABASE_URL in Rust test harnesses

yuzzjj
and
claude
committed
a3412b3
feat(security): Redis-backed rate limiting and CIDR-gated proxy header trust

yuzzjj
and
claude
committed
34b4bd0
docs(frontend): drop stale next_action.kind mention from skill-eligibility

yuzzjj
and
claude
committed
a22172b
feat(triggers): soft-delete triggers with concurrency-safe delete and task-cancel hardening

yuzzjj
and
claude
committed
981d593
feat(triggers): surface soft-delete and active-run states in the trigger UI

yuzzjj
and
claude
committed
da7ed06
docs(triggers): deprecate trigger-level system_prompt in favor of prompt_template

yuzzjj
and
claude
committed
51c0be4
refactor(triggers): dedupe trigger row-lock and task-cancel finalize paths

yuzzjj
and
claude
committed
3413892
fix(secrets): return 409 on duplicate secret name instead of 500

yuzzjj
and
claude
committed
056b357

Commits on Jul 30, 2026

fix: resolve ci checks
yuzzjj
committed
28e7367
test: prune redundant test coverage
yuzzjj
committed
80602e3
test: prune static architecture guards
yuzzjj
committed
54d8a8c
test: consolidate skill permission coverage
yuzzjj
committed
d41716c
test: remove redundant rust pytest wrappers
yuzzjj
committed
5cfbbca
test: remove redundant managed id test
yuzzjj
committed
6f66687
test: remove obsolete webhook run history test
yuzzjj
committed
f1414e2
test: add kind cluster configuration for JoySafeter K8sProvider validation
yuzzjj
committed
ad5a9a4
feat: egress gateway redesign — fix deadlock, in-process bridge, async policy refresh

GLei16
and
claude
committed
2fd9fc4
fix: remove 'unrestricted' network option from environment editor and quickstart

GLei16
and
claude
committed
b9aee58
fix: wrap platform organization list response
GLei16
committed
4bdaf9f
fix: emit user.message event on API/cron task submission

GLei16
and
claude
committed
f79000b
fix: use LOGICAL_DNS clusters + route retry_policy for egress stability

GLei16
and
claude
committed
9fd5267
fix: Envoy stability hardening — access log, StringMatch, stream_idle_timeout

GLei16
and
claude
committed
2179cf2
fix: remove per_try_timeout and 5xx retry from egress routes

GLei16
and
claude
committed
0cbc9a0

Commits on Jul 31, 2026

fix: add route timeout:0 to proto path + restore 5xx retry

GLei16
and
claude
committed
23d4364
fix: emit JSON Envoy access logs in grpc xDS
GLei16
committed
16c6ae6
fix: add dns_failure_refresh_rate to LOGICAL_DNS clusters

GLei16
and
claude
committed
620877e
feat: eliminate cluster warming — use shared dynamic_forward_proxy for all egress

GLei16
and
claude
committed
93834da
feat: transparent egress mode — real hosts in sandbox, DFP clusters, zero warming

GLei16
and
claude
committed
68b009a
fix: inject DISABLE_TELEMETRY=1 into sandbox env

GLei16
and
claude
committed
30cb7ea
Merge origin/joysafeter-v2 into internal joysafeter-v2

GLei16
and
claude
committed
c033f66
feat: show env vars, egress services, storage volumes in session env drawer

GLei16
and
claude
committed
4b65600
fix: session env drawer — always show env vars/volumes/services, hide packages

GLei16
and
claude
committed
060dfdf
fix: mask environment variable values in session env drawer

GLei16
and
claude
committed
a7819a3
fix: harden trigger migration and frontend build
GLei16
committed
3f13e76
fix: repair task trigger column during migration
GLei16
committed
23b775e
fix: repair task trigger id migration
GLei16
committed
c8633a3

Commits on Aug 1, 2026

refactor: migrate K8s provider from kubectl CLI to kube-rs SDK

GLei16
and
claude
committed
6648083
feat: production-grade K8s Lease-based leader election for HA

GLei16
and
claude
committed
a304224
feat: graceful drain, anti-affinity, PDB + K8s deployment manifests

GLei16
and
claude
committed
b6a0c7f
feat: complete K8s deployment manifest (orchestrator HA + Envoy DaemonSet)

GLei16
and
claude
committed
cecdceb

Commits on Aug 3, 2026

fix: preserve managed list pagination state
GLei16
committed
7892a8a
chore: add envoy access log diagnostics
GLei16
committed
1bdad7d
fix: add liveness/readiness probes to Envoy DaemonSet

GLei16
and
claude
committed
0eea626
feat: K8s provider egress integration — Envoy DaemonSet + hostPath + initContainer

GLei16
and
claude
committed
5bc9e65
fix: K8s provider — skip remote mkdir, skip bootstrap write, subPath isolation

GLei16
and
claude
committed
60aa0da
fix: add missing K8s env vars (LLM hosts, event stream, Redis prefix, idle timeout)

GLei16
and
claude
committed
3ba5160
docs: K8s deployment env reference (three-layer config guide)

GLei16
and
claude
committed
e9f2c70
fix: URL-encode POSTGRES_PASSWORD in database_url builder

GLei16
and
claude
committed
b6053b7
fix: URL-encode POSTGRES_PASSWORD in Rust orchestrator config too

GLei16
and
claude
committed
a7504c7
feat: build Redis URL from REDIS_* split fields with auto-encode

GLei16
and
claude
committed
d256b46
fix: escape % in database URL for alembic configparser

GLei16
and
claude
committed
a395895

Commits on Aug 4, 2026

fix: deduplicate user.message — skip emit when caller already persisted it

GLei16
and
claude
committed
31b5890

Commits on Aug 5, 2026

chore: consolidate pre-release baseline
yuzzjj
committed
1df0242
build: harden Rust runtime delivery
yuzzjj
committed
17094fb
fix(storage): import audit pagination helper
GLei16
committed
2be03c4
ci: gate and attest release images
yuzzjj
committed
97e33b3
chore: update sandbox pool images to include joysafeter-native
yuzzjj
committed
e891704
feat(triggers): paginate run history and storage audit
GLei16
committed
dd0cdc9
build(frontend): add reusable jdos base image
GLei16
committed
7abedcb
feat: PodWatcher — K8s Watch-based local pod cache (zero API calls for status/list)

GLei16
and
claude
committed
059e321
build(frontend): pin jdos base image
GLei16
committed
0c72d5e
fix(ci): unify pip mirror and repair workflows
yuzzjj
committed
35a4d8a
fix(ci): use pytest entrypoint
yuzzjj
committed
967c312
chore(db): add legacy schema cleanup migrations
GLei16
committed
405c3d5
fix(environments): hide package inputs in create dialog
GLei16
committed
c024e41
build(frontend): use full jdos base image registry
GLei16
committed
5b884e5
build(frontend): use full base image registry in jdos config
GLei16
committed
d4a8f70
fix(ci): provide backend test secrets
yuzzjj
committed
6e8183f
Merge internal/joysafeter-v2 into origin
GLei16
committed
4d6c20a